CVE-2005-2916

2005-09-1404:00:00

mitre

www.cve.org

linksys wrt54g

authentication bypass

remote attack

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

64.7%

JSON

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.